The SSH Connection

La Fonera uses the dropbear SSH client with public key authentication. The private key of La Fonera is available in the sources (/etc/dropbear/key) and here. It looks like every La Fonera uses the same private key with no passphrase. You can connect to download.fon.com and get the shell script (described earlier), if you type:

echo "mode='start' wlmac='FONERASWLANMAC' mac='FONERASETHERNETMAC' fonrev='4' firmware='0.7.0' chillver='1.0' thclver='1.0' device='fonera'" | dbclient -T -i PATHTOTHEPRIVATEKEY -p 1937 openwrt@download.fon.com